CVE-2021-38569

HIGH 7.5CVE-2021-38569 · Published 11/08/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
foxit reader foxitsoftware	`< 10.1.4`	`10.1.4`
phantompdf foxitsoftware	`< 10.1.4`	`10.1.4`

Description

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.

References

foxitsoftware.com/support/security-bulletins.php · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free